Malicious code in continental_echidna_z3n (npm)

Source: amazon-inspector 0496011fd17a29d1751cde9c1f23c8ad3aab71c205d82c8af22569b70bd2ce82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in considerable_whitefish_z3n (npm)

Source: amazon-inspector dbb841939eb34d59dbb53beefa268338b7f063c988a9d1a782a6848af7db432a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in configstore-wasat-wezen-ora (npm)

Source: amazon-inspector 66701c6c203fbd7db0e370552a5f119cbbb92f5de3ad0aaa4d68f7aa2d274940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in citra-teh93-pore (npm)

Source: amazon-inspector 564ff996d15591888fdc63db0fe6a90c5a2a785df99633f537a151b4fbd7564d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in citra-lapis12-sukiwir (npm)

Source: amazon-inspector 90e0f77ab2a9a5674b5ef8af79bab6faf5cf1f32921f176f1dd577a3ae20fe78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in citra-gaplek78-breki (npm)

Source: amazon-inspector 97de0838c5e5af7cbb4c844e8f89e885904f9d31551006525886c5f034dc81e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in cindy-kue8-riris (npm)

Source: amazon-inspector ff5b900be1c1108d494c5ac0afd7b307c4bf05bddddcc06d5cda8674ccc206fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in anais-papimoa-yama02ipaiog (npm)

Source: amazon-inspector bbdb3a20e98656dcc3aa9dd661fc7c5f66f9f7478495675c5ea1e94ae32fd0b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in alternative_jay-appteadev (npm)

Source: amazon-inspector f43c9f957ab6bb7f8a054c2cc7c85e6282950821ab7b86dfbd20a8e379bdd490 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in altair-promise-castor-heka (npm)

Source: amazon-inspector 53c3a1a5a4ff845ee380e66cb7b5ce3ba889f5afd50a6a1ea2e02fd6f0783031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in akanabi-aligfuh-aihmava (npm)

Source: amazon-inspector 649f73233df86e7ee27ecc6a996cc5b8f9ca41dbbaeb42641617f10c302b1688 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in agus-brengkes2-tititugel (npm)

Source: amazon-inspector 3ea4fe552f224c5afe2f2efb669e618ab4cf68bb73656b22efeca5b733ae3d17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in agreed_flamingo_z3n (npm)

Source: amazon-inspector ea78cc197110c654af28492ce7d8cee3ea27e5875b33e4b0e0573fde9ce87177 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in afffffri-zidan-tea (npm)

Source: amazon-inspector c1e8893e7ac2f02aaeb4017d0fc4f11426d2c7ba7c2849fe83f73efa5fd50b40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

MAL-2025-189614 Malicious code in spectron-webdriver-async-primatology-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4810ee66c68692cb4e0793f469d0d3874bbb2255c23b0dd696e904d2e43f0c2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ignite-cosmicray-accretion-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6898aafe008e3c13932d7554f16b7c52bff08415b7ba39795af33e4b574c3c6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eta-sed-assert-spy-hash (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba02fba2294b944dedb22735bc1a124430a994c135af1e2b1361494f868a743 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190001 Malicious code in triton-radiant-epimetheus-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f37690579c85320317072d9cdc94e1053ebab4d6fe9f33c85656cc0bb9598f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188814 Malicious code in primatology-algol-postgres-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 013c6424d179894374a2287438b3d3e54683c76bd6bcfc312e41d2c1f7459f05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lithosphere-markdown-pdf-winston-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc6fbfe227af2797cf89ea184596ed69bc80870c57f08a1e421accae594ddd57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...